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CLAIMS 

What is claimed is: 

1. An authorization method for storing and retrieving data, applied to an 
authorization system for connecting a terminal device to a resource system 
established by an application service provider (ASP) via a network, so as to allow 
the ASP to authorize a user at the terminal device to interact therewith for data 
storage and retrieval, wherein the authorization system is pre-constructed with a 
database and an authorization account, while the database includes a plurality of 
jj, user's data for identifying the user submitting a request for loginning the resource 

o 

q system, and the authorization account is used for authorizing the user to store and 

fU 

ft! retrieve the resource system; the authorization method comprising the steps of: 

HI 

m (1) receiving user's data inputted by the user to the terminal device via the 

® 

s authorization system; 

flf (2) comparing the user's data transmitted from the terminal device with the 

m 

0 user's data stored in the database via the authorization system, wherein 

O 

N= if no user's data in the database matches the user's data transmitted 

from the terminal device, then step (3) is followed; if one of the user's 
data in the database matches the user's data transmitted from the 
terminal device, then step (4) is followed; 

(3) sending a message of failure in loginning the resource system via the 
authorization system to the terminal device, and allowing the user at the 
terminal device to re-input user's data for loginning the resource system; 
then returning to the step (1); and 

(4) sending an authorization account via the authorization system to the 
resource system, and transmitting data generated by the resource system 
to the terminal device, so as to allow the user at the terminal device to 
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interact with the resource system for data storage and retrieval. 
The authorization method of claim 1, wherein the user's data include a dedicated 
user's name and a password corresponding to the user's name. 
The authorization method of claim 1, wherein the resource system is an enterprise 
resource planning (ERP) system. 

The authorization method of claim 3, wherein the ERP system is a R/3 internet 
application components system for connecting operation of an enterprise to 
internet. 

The authorization method of claim 1, wherein the authorization system is 
established in a server host. 

The authorization method of claim 5, wherein the authorization system is 
middleware. 

The authorization method of claim 1, wherein the authorization system and the 
resource system are contained in world wide web (WWW). 
An authorization system for storing and retrieving data, for connecting a terminal 
device to a resource system established by an application service provider (ASP) 
via a network, so as to allow a user at the terminal device to store and retrieve 
application software provided by the ASP; the authorization system comprising: 

a database for establishing user's data for storing and retrieving the 
resource system; 

a receiving module for receiving user's data for loginning the resource 
system inputted by the user at the terminal device; 

an identifying module for comparing the user's data transmitted from the 
receiving module with the user's data stored in the database; 

a replying module for responding according to compared results from the 
identifying module, wherein if no user's data in the database matches the user's 
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data inputted by the user, the replying module sends a message of failure in 
loginning the resource system to the user at the terminal device, and allows the 
user to re-input user's data for loginning the resource system; if on of the user's 
data in the database matches the user's data inputted by the user, the replying 
module generates a message of permission for loginning the resource system; 

a managing module having an authorization account for loginning the 
resource system, wherein the managing module sends an authorization account 
to the resource system according to the permission message transmitted from the 
replying module, so as to allow the terminal device to interact with the resource 

Q system for data storage and retrieval after the authorization account is identified 

5 

III by the resource system; and 

CP 

ifi a processing module for processing data generated by the interaction 

f 

01 between the terminal device and the resource system, so as to display the data in 

8 

M the form of a web page on a browser of the terminal device. 

fU 

?y 9. The authorization system of claim 8, wherein the web page is in the form of 

p extensible markup language (XML). 

10. The authorization system of claim 8, wherein the user's data include a dedicated 
user's name and a password corresponding to the user's name. 

11. The authorization system of claim 8, wherein the resource system is an enterprise 
resource planning (ERP) system. 

12. The authorization system of claim 11, wherein the ERP system is a R/3 internet 
application components system for connecting operation of an enterprise to 
internet. 

13. The authorization system of claim 8, wherein the authorization system is 
established in a server host. 

14. The authorization system of claim 13, wherein the authorization system is 
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middleware. 

15. The authorization system of claim 8, wherein the authorization system and the 
resource system are contained in world wide web (WWW). 
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